From 41b163278ded0b9a87b9c2d26578aa6bc73e1048 Mon Sep 17 00:00:00 2001 From: kang_xiao_qiang Date: Sun, 20 Sep 2020 17:49:29 +0800 Subject: [PATCH] fix cve --- CVE-2020-17507.patch | 7 ++++--- qt.spec | 2 +- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/CVE-2020-17507.patch b/CVE-2020-17507.patch index 5534134..756ad15 100644 --- a/CVE-2020-17507.patch +++ b/CVE-2020-17507.patch @@ -1,8 +1,9 @@ From 1a27a6cefbb457f2fb74159267835aaefb7c992d Mon Sep 17 00:00:00 2001 -From: kang_xiao_qiang -Date: Sun, 20 Sep 2020 15:35:21 +0800 -Subject: [PATCH] 2 +From: Dmitry Shachnev +Date: Tue, 18 Aug 2020 16:16:57 +0300 +Subject: [PATCH] Backport upstream patch to fix buffer overflow in XBMparser. +Closes: #968444, CVE-2020-17507. --- src/gui/image/qxbmhandler.cpp | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/qt.spec b/qt.spec index 87bafd7..5582f17 100644 --- a/qt.spec +++ b/qt.spec @@ -78,7 +78,7 @@ Patch6001: CVE-2018-19872.patch Patch6002: CVE-2018-19871.patch Patch6003: CVE-2018-19870.patch Patch6004: CVE-2018-19873.patch -Patch45: CVE-2020-17507.patch +Patch45: CVE-2020-17507.patch BuildRequires: cups-devel desktop-file-utils gcc-c++ libjpeg-devel findutils libmng-devel libtiff-devel pkgconfig pkgconfig(alsa) BuildRequires: pkgconfig(dbus-1) pkgconfig(fontconfig) pkgconfig(glib-2.0) pkgconfig(icu-i18n) openssl-devel pkgconfig(libpng)